Login Request a demo
MA
Product
matrix-js-sdk
by matrix-org · last CVE Sep 16, 2025
8
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 4Low 1
Severity
All severities8Critical0High3Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add matrix-js-sdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47080
8.7
1%
Oct 15
matrix-js-sdk keys sent via `sendSharedHistoryKeys` vulnerable to interception by malicious homeserver
Affected: >= 9.11.0, < 34.8.0
CVE-2023-28427
8.2
1%
Mar 28
Prototype pollution in matrix-js-sdk
Affected: < 24.0.0
CVE-2022-39250
7.5
1%
Sep 29
Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
Affected: < 19.7.0
CVE-2024-50336
5.3
1%
Nov 12
matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal
Affected: < 34.11.1
CVE-2024-42369
5.3
0%
Aug 20
A room with itself as a its predecessor will freeze matrix-js-sdk
Affected: < 34.3.1
CVE-2023-29529
5.3
1%
Apr 14
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Affected: < 24.1.0
CVE-2022-36059
5.3
1%
Mar 28
Prototype pollution in matrix-js-sdk
Affected: < 19.4.0
CVE-2025-59160
2.7
0%
Sep 16
matrix-js-sdk has insufficient validation when considering a room to be upgraded by another
Affected: < 38.2.0
Showing 8